Can a network map be generated automatically from traffic for an auditor?

Yes, for the segments you monitor, and it is often more accurate than a drawn diagram. A map built from observed traffic shows which devices exist, the names they announce and who talks to whom, including connections nobody documented, such as a workstation that reaches a server it should not or a supplier's remote session. It does not show what never sends traffic, segments without a sensor, or the intended design, so keep your architecture diagram and use the observed map to check it. On every plan, NetSenX builds such a network map from monitored traffic, with each device's first and last seen. Before showing it to an outside auditor, consider what it reveals: device names can contain employees' names and the map describes your internal structure, so share it on screen or under a non-disclosure agreement.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

← All 35 questions on Incident reporting deadlinesAll topics